Overview: MPC Smart Vaults for Institutional Digital Assets
Vaultody’s Smart Vaults are a major evolution in our MPC-based custody stack. After months of engineering, they are now live as a core component of our institutional multi-party computation (MPC) custodial infrastructure.
In Vaultody, every wallet is called a “vault.” Smart Vaults are a new class of vault designed specifically for high-throughput, institution-grade digital asset management. They combine MPC, hardware enclaves and fee-optimized address management into a single product that can support exchanges, neobanks, trading venues, gaming platforms and payment processors.
This article explains:
- What makes Smart Vaults “smart” from a technical and operational perspective.
- How Smart Vaults compare with General Vaults and when to use each.
- Concrete use cases for both vault types.
- A step-by-step guide to creating and backing up new vaults in your Vaultody dashboard.
All vault types are protected by Vaultody’s MPC engine and hardware enclaves, ensuring that private keys never exist in a single place and are never exposed to internal or external actors.
What Makes Vaultody Smart Vaults Truly “Smart”?
Smart Vaults are built for organizations that manage a large and growing number of on-chain addresses and transactions. Although there are no strict eligibility requirements, their design clearly benefits institutions with complex operational flows.
Infinite deposit (child) addresses
With Smart Vaults you can generate a practically unlimited number of deposit addresses—referred to as child addresses. This enables you to:
- Assign unique deposit addresses to every user, merchant, or internal business unit.
- Segment flows by product, partner, jurisdiction or risk profile.
- Scale address creation without re-architecting your custody layer.
Batch transactions and fee optimization
Smart Vaults are engineered to support batch transactions (a capability being rolled out progressively). Instead of sending and paying for each transaction independently, you can group many transfers into a smaller number of on-chain operations. Combined with the station-address model described below, this can reduce effective transaction costs by up to around 90%, depending on your network and usage pattern.
Station address: one fee source, no dust
A recurring problem in high-volume wallet architectures is wallet dust: small, unspendable fragments of cryptocurrency left behind after many fee payments and partial spends. Over time, dust fragments can lead to capital inefficiency and operational complexity.
Smart Vaults solve this with a station address:
- The station address resides inside your primary vault.
- It is the single source of network fees for many underlying transactions.
- Child addresses can be swept or aggregated without each one paying its own fee.
Practically, this means you pay one fee for many related transfers, drastically reducing dust across all child addresses and simplifying accounting.
Built on MPC and hardware enclaves
As with every Vaultody product, Smart Vaults are secured by:
- Multi-party computation (MPC): key material is split across independent parties and never reconstructed in one place, minimizing single-point-of-failure risk.
- Hardware enclaves (trusted execution environments): critical operations run inside secure enclaves, isolating them from compromised hosts or insiders.
These mechanisms combine to provide strong protection against both external attacks and internal misuse.
Smart Vaults vs. General Vaults: Which Should You Use?
Vaultody offers two main MPC custody primitives:
- Smart Vaults – high-volume, fee-optimized vaults with station-address architecture.
- General Vaults – conservative, policy-rich vaults for high-value storage and lower transaction frequency.
Shared security and governance model
Regardless of the vault type you select, you benefit from the same security and control features:
- MPC core: all transaction signing is performed through Vaultody’s MPC engine.
- Hardware enclaves: vault operations execute inside TEEs for additional isolation.
- Vaultody Approver mobile app: vault owners and approvers can confirm or reject outgoing transactions and other system actions from a secure mobile interface.
- Flexible approval policies: both vault types can be configured with multi-step approval rules and team-based access controls.
When General Vaults are the better fit
General Vaults are optimized for organizations that manage sizable balances but do not need to move assets dozens or hundreds of times per hour. Typical use cases include:
- Hedge funds and proprietary trading firms.
- Venture capital funds and family offices.
- Corporate treasuries and long-term digital asset treasuries.
General Vaults shine in these scenarios because they emphasize:
- Layered transaction approvals: Vaultody’s transaction policy engine allows you to define multi-level approval thresholds by amount, asset, destination, time of day and more.
- Operational simplicity: fewer addresses, fewer daily transactions, and clear, auditable approval flows.
When Smart Vaults unlock more value
Smart Vaults are designed for throughput and fee efficiency. They are especially suitable for (but not limited to):
- Centralized exchanges and brokerages.
- OTC desks with many counterparties and settlement flows.
- Neobanks and fintechs offering crypto accounts at scale.
- Gaming, metaverse and NFT platforms needing one address per user or in-game asset.
- Payment processors and stablecoin operators with many small incoming and outgoing payments.
For these organizations, Smart Vaults can:
- Provide as many child deposit addresses as required without redesigning the wallet infrastructure.
- Use batch transactions to combine multiple payouts or sweeps, reducing on-chain noise and network fees.
- Pay network fees from a single station address, solving the dust problem and improving capital efficiency.
- Retain full MPC security and policy-driven approvals also available in General Vaults.
Step-by-Step: Setting Up General and Smart Vaults
Once you understand how each vault type maps to your operational needs, you can configure one or more vaults in your Vaultody dashboard. The process is identical for Smart and General Vaults; the key difference is the type you select in step three.
1. Sign up and access your Vaultody dashboard
If you are new to Vaultody, start by creating an account and completing the self-onboarding flow. This may involve compliance checks and basic organizational information.
After onboarding is approved, sign in at your usual Vaultody URL and access the main dashboard, where you can view vaults, balances, policies and integrations.
2. Navigate to “Vaults” and start creating a vault
From the left-hand navigation menu in your dashboard:
- Select “Vaults” to open the vaults overview.
- Click the “Create a new vault” button, typically located on the right side of the screen.
3. Choose your vault type: Smart or General
A configuration pop-up will appear, prompting you to choose between Smart Vaults and General Vaults. For each option, you will see a concise description of typical use cases and key features. In summary:
- Choose Smart Vault if you expect many addresses and frequent transfers, and you want fee-optimized operations.
- Choose General Vault if you primarily hold high-value balances and require rich approval flows for less frequent transactions.
After reviewing the descriptions, select the appropriate vault type and click “Next step.”
4. Name and color-code your vault
The next screen lets you define how this vault will appear in your dashboard:
- Enter a vault name that clearly describes its purpose (for example, “Exchange Hot Wallet – BTC” or “Fund A Long-Term Cold Vault”).
- Select a color for the vault so you can quickly distinguish it from other vaults in the UI.
Check the confirmation box indicating that you understand the configuration, and then move to the final step.
5. Review the summary and create the vault
You will now see a summary of your choices:
- Vault type (Smart or General).
- Vault name.
- Vault color.
Confirm that everything is correct. If needed, go back to edit any details. When ready, click “Create a new vault”. A confirmation pop-up will indicate that your vault has been created and is now visible in your dashboard.
6. Confirm creation and proceed to backup
After creation, Vaultody immediately presents the option to create a backup for the new vault. This is not a cosmetic step—it is a mandatory part of secure operation and disaster recovery. You can technically postpone it, but best practice is to perform the backup immediately, before the vault begins holding material balances.
7. Perform the mandatory Vault backup
Each vault requires exactly one backup operation, which anchors your ability to restore access in the event of infrastructure loss or other incidents. During the backup flow you will be asked to:
- Provide your public key according to the backup specification.
- Re-enter or confirm the public key to prevent accidental typos.
- Submit the backup for approval through the defined policy, if applicable.
We recommend following Vaultody’s official Backup and Restore Guide to verify that:
- The backup was created successfully.
- Recovery procedures are documented in your internal runbooks.
- Access to backup material is controlled and auditable.
Once backup is complete, the vault is fully operational. You can start generating deposit addresses, configuring policies and integrating the vault with your trading, banking or product systems.
8. Get help choosing the right vault strategy
If you are unsure how to structure your vault architecture—e.g. how many Smart Vaults vs. General Vaults you should run, or how to map them to business units—Vaultody’s team can help you design an appropriate layout.
You can contact us at [email protected] for guidance on:
- Selecting vault types for specific products or entities.
- Designing approval policies for different risk tiers.
- Planning migration from legacy wallet infrastructure to MPC-based Smart Vaults.
Example Use Cases for Smart and General Vaults
Smart Vaults in production-like scenarios
- Centralized exchange: issue unique child deposit addresses per user and asset, sweep funds to treasury with minimal fees via the station address, and use batch withdrawals to optimize gas usage.
- Payment gateway: assign a child address to each merchant or invoice, settle periodically to a treasury vault and charge all network fees from a central station address.
- Web3 gaming platform: create one deposit address per player or game instance and rely on batched on-chain interactions to reconcile balances with low overhead.
General Vaults for long-term holdings
- Fund cold storage: hold long-term positions in a General Vault, where every transfer requires multi-layer approvals and is fully auditable.
- Corporate treasury: segregate operating capital and strategic holdings into separate General Vaults with more stringent thresholds on the latter.
Summary: Building a Scalable Custody Architecture with Smart Vaults
Smart Vaults extend Vaultody’s MPC platform with features that matter for large-scale, real-world digital asset businesses: unlimited deposit addresses, fee-efficient batching and a station-address design that eliminates dust and simplifies fee management.
Because Smart Vaults and General Vaults share the same MPC core, hardware enclaves and approval tooling, you can mix both types in one architecture—using Smart Vaults for high-volume flows and General Vaults for conservative long-term storage.
If you would like to explore Smart Vaults, discuss a migration from your current wallet provider or design a new institutional custody stack, reach out to [email protected] or request access via the contact page on the Vaultody website.